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Abstract 

We define a new topos, the Herbrand topos, inspired by the modified 
realizability topos and our earlier work on Herbrand realizability. We also 
introduce the category of Herbrand assemblies and characterise these as 
the ^-i-separated objects in the Herbrand topos. In addition, we show 
that the category of sets is included as the category of -i^-sheaves and 
prove that the inclusion functor preserves and reflects validity of first-order 
formulas. 



1 Introduction 

In [I] the author, together with Eyvind Briseid and Pavol Safarik, hit upon a 
new realizability interpretation in an attempt to find computational content in 
arguments performed in nonstandard analysis. This new interpretation, which 
was a variant of modified realizability, was dubbed Herbrand realizability. Our 
investigations in [I] were entirely proof-theoretic; the question was whether it 
would be possible to understand Herbrand realizability from a semantic point 
of view as well. This paper shows that that is indeed the case. 

To develop this semantics we use topos theory (for which see [101 [3 IB])- 
This choice was motivated by the fact that the notion of a topos is the most 
comprehensive notion of model for a constructive system we have available, in- 
corporating topological, sheaf and Kripke models, as well as various realizability 
and functional interpretations. In addition, it shows that these interpretations 
can be made to work for full higher-order arithmetic. The starting point for this 
paper was the theory of realizability toposes (starting with [6] and surveyed in 
[14]): indeed, the topos most closely related to the topos we will introduce here 
is the modified realizability topos (for which, see p"3 ] fl4j). 

In order to arrive at the modified realizability topos, one has to abstract 
considerably from Kreisel's original definition [9]. First of all, one fixes the 
hereditarily effective operations (HEO) as a model of Godcl's T. Then a type 
gets identified with a certain inhabited set of codes and a set of realizers of that 



1 



type will simply be subset of that set. The step that Grayson took in [5] was to 
take as truth values any pair (A ,Ai) where A and A\ are two sets of codes 
(often called the actual realizers and the potential realizers, respectively) with 
A® C Ai and A\ containing a fixed element. One can build a tripos around 
such pairs and in the associated topos the finite types will be interpreted as the 
hereditarily effective operations. 

In order to define the Herbrand topos, we make a similar move. Recall from 
[T] that in order to realize 

(3 st n e n)ip(n) 

it suffices to supply a finite list of natural numbers (rii, . . . , n^) such that (p(n.i) 
is realized for some i < k. Abstracting away from the details, this means that 
potential realizers are finite list of natural numbers, while the actual realizers are 
those finite lists (ni, . . . , nk) which contain an rii which works (this is similar to 
the idea of Herbrand disjunctions in proof theory; hence the name). Abstracting 
even further, we say that truth values in the Herbrand topos are pairs of sets 
of codes (Aq, Ai) such that Aq consists of finite sequences all whose elements 
belong to A\ and which is closed upwards (by this we mean that it is closed 
under supersets, if we regard finite sequences as representatives for their set of 
components; see also Lemma 5.4 in Q]). This paper shows that on the basis of 
these pairs one can construct a tripos, whose associated topos we will call the 
Herbrand topos. 

The Herbrand topos turns out to have several features in common with other 
rcalizability toposes. It has an interesting subcategory consisting of the -1-1- 
separated objects (we will call these the Herbrand assemblies) and the category 
of sets is included as a subtopos via the -1-1-topology. What is very unusual, 
however, is that this inclusion functor, which we will call V, preserves and 
reflects the validity of first-order logic; in fact, V preserves and reflects the 
structure of a locally cartesian closed pretopos. In particular, V2 = 2 in the 
Herbrand topos. 

This is a striking illustration of the fact that in the Herbrand topos disjunc- 
tion has essentially no constructive content. Indeed, in order for a disjunction 
ip V i/j to be realized it is sufficient that one of the two disjuncts is realized; but 
a realizer for ip V ip need not say which disjunct it is that is actually realized. 
This fact explains many of the features of the Herbrand topos: why it believes 
in the law of excluded middle for n^-formulas, and why it does not believe in 
Church's thesis or in continuity principles. 

However, arithmetic in the Herbrand topos is not classical. This is due to the 
fact that existential quantifiers still have some constructive content. Admittedly, 
this content is less than is usually the case, but it is still strong enough to rule 
out Markov's principle. 

Finally, there are two other properties of the Herbrand topos which are 
worth mentioning. First of all, because V preserves and reflects first-order 
logic, V^4 will be a nonstandard model of arithmetic in the Herbrand topos for 
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any nonstandard model A (actually, it will also be a nonstandard model when 
A is the standard model N). This is interesting, because realizability toposes 
are unfavourable terrain for nonstandard models of arithmetic (see [lljV 

A proof-theoretic feature of the Herbrand topos which is worth stressing 
is that in it the Fan Theorem holds (see Proposition 17.101 below) ; for this it 
is not necessary to assume its validity in the metatheory. The proof should 
look very familiar to anyone who is aware of the bounded modified realizability 
interpretation and its properties (for which, see [1]). 

The contents of the paper are as follows. In Section 2 we will explain the 
notation that we will use, in so far as it is not standard. We define the Herbrand 
tripos and topos in Section 3. Section 4 introduces the Herbrand assemblies 
and proves that they form a locally cartesian closed regular category with finite 
stable colimits and a natural numbers object. Then, in Section 5, we characterise 
these Herbrand assemblies as the -i-i-separated objects in the Herbrand topos; 
in addition, we show that the category of sets is included as the -i-i-sheaves 
and that the inclusion functor preserves and reflects the structure of a locally 
cartesian closed pretopos. In Section 6, we characterise the projectives in the 
Herbrand assemblies and show that the natural numbers object is projective in 
the category of Herbrand assemblies, but not in the Herbrand topos. Section 7 
studies the logical properties of the Herbrand topos and, finally, in Section 8 we 
formulate some open questions and directions for future research. 

In this paper we assume familiarity with the theory of triposes and peas; for 
the necessary background information, we recommend |14j . 

2 Notation 

Throughout this paper, V will be a fixed nontrivial pea. It is well known that 
we can code finite sequences of elements in V as elements of V. If n is a such 
a code, then we write \n\ for the length of the sequence it codes and rii for 
the ith projection (where n\ is the first element of the sequence and n\ n \ the 
last). We will write (m, . . . , ilk) for the code of the sequence (n±, . . . , n^) and 
() for the code of the empty sequence. Moreover, * will denote the operation 
of concatenation of coded sequences and ax * a 2 * ■ ■ ■ * will stand for the 
result of concatenating a\ till a^. If k = (i.e., if we are taking the empty 
concatenation), then the result should be the code of the empty sequence (). 

If A C V is some subset of V, then we will write \A for the set of codes 
of finite sequences all whose elements belong to A (note that this will always 
include the empty sequence). For our purposes it will be important that \A 
carries a preordcr structure with m < n if 

(Vi < \m\) (3j < \n\) rrii = rij. 
We will write p for the pairing operator and denote the nth Church numeral 
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simply by n. In addition, if A and B are subsets of V , we will write 

A&B = {pOa: a £ A} U {pl6 : b £ B}, 
A®B = {pab: a e A,b e B}. 

Observe that there is an exponential isomorphism 

\{AkB) =\A®\B, 

where both the map itself and and its inverse are order-preserving and repre- 
sented by elements in the pea, independent of the specific A and B. We will 
often implicitly use this isomorphism and regard elements of l(ASzB) as pairs 
pxy with x s!A and y £!B. 

3 The Herbrand tripos 

Construction of the Herbrand tripos. Put 

£ = {{A 0l Ai) : A , Ai C V, A C!Ai and A is upwards closed in \Ai}. 

For X £ S, we will denote the result of projecting on the first and second 
coordinate by Xq and X\. As for modified realizability, we will refer to the 
elements of Xq as the actual realizers and the elements of \X\ as the potential 
realizers. 

If X is any set, then we preorder T, x as follows: (<f>: X — > S) < (ip: X — > S) 
if there is an element r such that for all x G X and neP 

if n s\(j)(x)i, then r ■ n \, and r • n 

and 

if n £ <f>(x)o, then r ■ n € ip(x)o. 

Finally, if f:X — > Y is any function, then reindcxing — > Y. x is given 
simply by precomposition. 

Theorem 3.1. The indexed preorder Yi X defined above is a tripos. 

The associated topos we will call the Herbrand topos and denote by HT[P]. 

Proof. We first verify that E has the structure of a Heyting prealgebra. The 
top and bottom element are (YP,V) and (0,0), respectively. The conjunction 
(Co, Ci) = (A , Ai) A (Bo, Si) is given by 

Ci = Ai&Bi, 

Co = {pab : a £ Aq and b £ £?o} 
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(making use of the exponential isomorphism). The disjunction (Co,Ci) = 
(A , Ax) V (B , Bi) is given by 

Co = {pab : a G A Q or b G J3 } 

(again making use of the exponential isomorphism). To see that this works, 
suppose that (A ,Ai) < (D ,Di) is tracked by r and (B ,Bi) < (D ,Di) is 
tracked by s. Then (Co,Ci) < (D ,Di) is tracked by the following map t: 
t(pab) = ra * sb. This works, because for pab 6 Co we have a G Aq or b E Bq: 
in the former case, we have ra G Dq, in the latter s6 G £>o- In either case we 
have ra * sfo because D is upwards closed. 

The implication (Co,Ci) = (Ao,Ai) — > (Bo,Bi) is given by 

Ci = {c G V : (Vm e!A x )c • m | and c • m G!Bi}, 
C = tiCi {(c) : c G Ci and (Vm e A ) c • m e B }. 

To see that this works, note that the evaluation map (Co,Ci) A (Aq,Ai) — > 
{Bo, Bi) is tracked by the function which maps p((ci, . . . , C&), a) to 

ci(a) * ... * Cfc(a). 

It is clear that this Heyting prealgebra structure lifts to each T, x . 

As said, the reindexing functors are given by precomposition. We now check 
that these have both adjoints satisfying the Beck-Chevalley condition. So sup- 
pose we have 0: X —> S, x- Y ~ ► S and f:X—>Y. The existential quantifier 
can be defined as follows: 

3/(0)(l/)o = tia/WCw)! {("): (3x 6 f~\y))n G 0(x) o }. 
To see this, note that 

1. we have 3/(0) < x if there is an r S P sending for each elements 
from !3/(0)(y)i to elements in \x(y)i, m such a way that if m € 3/(</>)(y)o, 
then r ■ m € x{y)o- 

2. And that we have < /*(x)j if there is an s G "P sending for each i£l 
elements in !0(x)i to elements in !x(/x)i, in such a way that if m G 0(x)o, 
then s • m G x(/ x )o- 

To construct such an s from an r, put 

s(m) = r((m)) 
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and to construct such an r from an s, put 

r((mi,...,m k )) = s(mi) * ...s(m k ). 

The universal quantifier is constructed as follows: 

V/(0)(i/)i = {a eV : (Vx G f^ 1 {y)) (yb e V) a ■ b I and a ■ & e!0(x)i}, 
V/(0)(2/)o = tlV/^Cj,)! {(«) : « G V/(0)(y)i and 

(Va;er 1 (y))(V6GP)a-6G0(x) o }. 

To see this, note that 

1. we have /*(x) < if there is an r £ P sending for each x S X elements 
from !x(/x)i to elements in !<^(x)i, in such a way that if m € x{f x )ot then 
r • m G <^(x)o- 

2. And that we have x < if there is an s £ P sending for each 
y G y elements in !x(y)i to elements in !V/(0)(y)i, in such a way that if 

G x(v)o, then s ■ m G V/(0)(y) o . 

To construct such an s from an r, put 

s = Xp.(Xq.r ■ p) 

and to construct such an r from an s, put 

r = Ap.[(s -p)o(k) * ... * (s -p)\ s . p \(k)]. 

It is easy to see that the universal quantifier, and hence also the the existential 
quantifier, satisfies Beck-Chevalley. 

Finally, the identity map id: S — > S is the generic element. □ 

4 Herbrand assemblies 

In this section we introduce the Herbrand assemblies and prove that they form 
a locally cartesian closed regular category with stable colimits. Later we will 
characterise them as a the -^-separated objects in the Herbrand topos. Of 
course, it follows from this that the category is a regular lece with stable colimits, 
but we need an explicit description of this structure later; in addition, such a 
description is, we believe, of independent interest. 

Definition 4.1. A Herbrand assembly over V is a triple (A, A, a) in which 
• A is a set, 
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• A is a subset of V , and 

• a: A —> Pow" pc '(!A) is a function whose codomain Pow" pc '(!„4) consists 
of the subsets X of \A that are inhabited and upwards closed in \A (i.e., 
m£l,ne!i and m <n imply n G X). 

A morphism /: (B, B, /?) — >■ (A, A, a) of Herbrand assemblies is a function 
f:B^A for which there is an n G V such that 

• for all in <E\B, the expression n ■ m is defined and its value belongs to \A, 

• and if b G B and m G 13(b), then n ■ m G a(fb). 

We will say that such an n tracks f or is a tracking of f. This clearly defines a 
category: we will denote it by H.Asm\P\. 

Lemma 4.2. The category r H.Asm\P\ has finite limits. 

Proof. The terminal object is (1,C, 7) with C = V and 7(*) =!7 : '. 
Equalizers as in 

/ 

(C, C, 7) > ► (£?, B, p) (A, A a) 

can be computed computed by putting C — {b G B : /6 = 176}, C = S and 

7 = p r c- 

A product (C, C,7) = (A, ^4., a) x (B,B,P) can be constructed by putting 

C = Ax B, 
C = AkB, 
7(0, b) = {pab : a G a(a),b G 

□ 

Lemma 4.3. XTie category T-LAsm[P] is regular. 

Proof. We claim that a map /: (B, B, P) — > (A, .A, a) is monic precisely when the 
underlying function / is injective (this should be clear), and is a cover precisely 
when there is an element r G V such that 

• for all 116U the expression r ■ n is defined and belongs to IB, and 

• there is for any a G A and n G a(a) an element b G / _1 (a) with r-n G P(b). 
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Let us call maps which have these two properties super epis. It is not hard to 
check that super epis are covers and that they are stable under pullback, so 
the proof will be finished once we show that every map can be factored as a 
super epi followed by a mono. But if /: (B, B, (3) — > (A, A, a) is any map, then 
it factors through (C, C,j) with C — Im(/), C = B and 7(a) = U^e/- 1 ^) 
Moreover, the obvious maps (B 7 B,(3) — > (C, C,7) and (C, C 7 j) — > (A, A, a) are 
a super epi and a mono, respectively. □ 

Lemma 4.4. The category T-LAsm\P] has stable sums and coequalizers. 

Proof. The initial object is (0,"P,7) with 7 the empty map. 

The sum (C, C, 7) = (A, A, a) + (B, B, p) is given by C = A + B, C = AhB, 
with 7(a) = {pxy : x G a(a),y g!£>} and 7(6) = {pxy : x &\A, y G P(b)}- 

A coequalizcr 

/ 

(B, B, P) (A, A, a) (C, C, 7) 

9 

is computed by letting C be the coequalizer in the category of sets, C = A and 

7(c) = Uaeg-i(c) a ( a )- n 

Lemma 4.5. The category T-LAsm\P] is locally cartesian closed. 

Proof. Assume f:(B,B,p) H- (A, A, a) and g: (S, S, a) — » (B,B,0) arc two 
morphisms of Hcrbrand assemblies. The object 0/(5) = (T,T,t) i s computed 
as follows: 

T = {(a G A,t: B a —> S) : gt = id s a and t is tracked }, 
T = Ak{n G V: (Vm &\B)n ■ m I and n ■ m g!<S}, 
r(a, t) = { p(m, (711, n*)) : m G a(a) and 
there is an rij tracking < } . 

The evaluation map /* 11/(5) — ^ 5 : (( a > ^ *(^) i s tracked by a code for the 
function L defined by 

L(p((m, . . . , rife), m)) = m(m) * ... * n k (m). 

□ 

Lemma 4.6. T/ie category T-LAsm\P] has a natural numbers object (nno). 

Proof. The nno is given by (N, Af, v) with A/" the collection of Church numerals 
in V and v{n) =fw («)• For suppose a structure 1 — >• (A, .A, a) — > (A, .A, a) 
is given and the first map is tracked by p and the second by q. Define s by 
recursion as sO = pO and s(n + 1) = q(s(n)), and i as t(n) = s(n ) * ... * s(ri| n |). 
Then the canonical map N — > A will be tracked by t. □ 
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To summarise: 

Theorem 4.7. The category WAsm[P] is a locally cartesian closed regular cat- 
egory with nno and stable colimits. 



5 Gamma and nabla 

In this section we show that some of the theory developed for modified realiz- 
ability also applies to Herbrand realizability. In particular, we show that the 
facts established on pages 281 and 282 of Van Oosten's paper on the modified 
realizability topos [12] hold for the Herbrand topos as well. (Warning: We follow 
the notation of that paper, rather than that of [T4].) 

First of all, note that TLAsm[V] is a full subcategory of H7~[P] , because every 
triple (A, A, a) can be considered as an object (A, =) of H7~[P] as follows: 



a'j 



(a(a), A) if a = a' 
(0,^4) otherwise 



In addition, we have a functor \7:Sets — > rlAsm[P] which sends a set X to 
the Herbrand assembly (X,V,(f>) with (f>(x) =VP for all x £ X. Taking the 
composition of these two functors we obtain a functor Sets — > TIT[P] which we 
will also denote by V. 

Remark 5.1. This is not the constant objects functor as defined in [TJ] (and 
denoted V there). 

Proposition 5.2. The functor V has a finite limit preserving left adjoint 

T: HT\V] Sets. 

Moreover, TV = 1. 

Proof. As usual, we send an object (X, ~) to X / ~, where X — {x 6 X : \x — 
xjo inhabited} with x ~ x' if \x = x'Jq inhabited. In addition, the transpose of 
a function /: T(X, =) — > Y is the function (X, =) — > VF represented by: 



F(x,y) 



\x = xj if x £ X and f([x}) = y, 
\x = x\\) otherwise. 



Note that therefore the unit ij- {X, =) — > VT(X, =) is represented by H: X x 
X -)• S with H(x, [x']) = [x = xj if x £ [x 1 ], and (0, fx = xji) otherwise. □ 

Lemma 5.3. Let (Ao,Ai) £ S. Then Ao is inhabited iff (— >— >(vlo , ^4i))o * s 
inhabited; in which case, (Xp.Q) £ (->^(Aq, Ai))q. 
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Proof. This follows from the fact that -*(Aq, A\) = (Co, C\), where C\ is the set 
of codes of functions which map elements from \A\ to the empty sequence, and 
Co —\C\ — {{)} if A is empty, and Co = otherwise. Hence Xp.Q G C\ always 
and (Xp.Q) G Co if A Q is empty. □ 

Proposition 5.4. For an object (X, =) in H1~[V] the following are equivalent: 

1- rjrx,=) ^ a monomorphism. 

2. (X, =) is -i-i- separated. 

3. (X, =) is isomorphic to a Herbrand assembly. 

Proof. 1 => 2: Suppose r\ is mono; so 

H(x, [z])AH(x\ [z]) -+x = x' 

holds. Suppose (oi, . . . ,a„) is an actual realizer for this. Furthermore, suppose 
b G [x = x} ,c e \x' = x'jo and d £ ^{x = x'\ a . Then b G H(x, [x]) ,c £ 
H(x\ [x'])o and [x] = [x 1 ] by the previous lemma, so 

ai(pbc) * ... * a n (pbc) G \x = x%; 

similar for potential realizers. So 

x = x A x' = x A -i-i(x = x ) — > x — x' 

holds and (X, =) is -i-i-separated. 

2^-3: Suppose t is an actual realizer of x — x A x' — x' A — i(x = x') — > 
x = x' . Define (A, A, a) by 

A = X , 

A = |J \lx = x%, 

a(a) = tu {(s) : (3x,x' G a)s G [x = x%}. 

One easily sees that there is a map F: (X, =) — > (A, A, a) defined by 

„, \ J [.t = x\ A (a(a), -4) if x G a, 

lX ' aj ~ \ \x = x\A{$,A) otherwise. 

To see that F(x,a) A F(x',a) — >• x = x' is realized (i.e., that F is monic), one 
uses that if there are actual for realizers F(x, a) of F(x' , a), then [x = x']o must 
be inhabited; but then one can compute an element in this set using t and the 
previous lemma. 

To show that a = a — > (3x G X) F(x, a) is realized (i.e., to show that F is 
epic), one needs an element s G V which uniformly in a G A sends elements 
from \A to elements in 

! \JlF(x,a), 

x£X 
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in such a way that if m G a(a), then 

s ■ m St {(n) : (3x E J)n6 F(a;, a) }. 

This can be done: for if fc = (fci, . . . , k n ) G\A, then each ki belongs to some 
! fx = x'Ji. Since this equality is symmetric and transitive, we can compute from 
h an element tki E\fx = Then p(tk i} k) £\F(x, a)\ and hence (p(tki,k))i G 
! Uxgx'-^ T ( a; ' °)- If (k\ , . . . , fc„) also belongs to a(a), then some belongs to fx = 
x'Jo with x,x' G a. Then p(tki,k) G F(x, 0)0 and hence s • m Gt : G 
X)n G i^(x,a)o}, as desired. 

The implication 3 => 1 is left to the reader. □ 
Proposition 5.5. For an object (X, =) in %T\P] the following are equivalent: 

1. ??(x,=) * s arl isomorphism. 

2. (X, =) is isomorphic to an object of the form V Z . 

3. (X, =) is a -1-1- sheaf. 

Proof. 1 => 2 is trivial. 

2 => 3: One easily checks by hand that if /: (X, =) — > (Y, =) is a dense mono 
and g: (X, =) — > W Z is any map, then the relation go f^ 1 is actually a function. 

3^1: If (X, =) is a -1-1-sheaf, then it is certainly separated. Hence V{x,=) 
is monic, by the previous proposition; as it is also dense, it follows that it has a 
left inverse. But then it is not hard to see that it must be an isomorphism. □ 

We take a closer look at the objects in the image of V. 

Lemma 5.6. // (A, A, a) is a Herbrand assembly and there is an element e G V 
such that e G A and (e) G a(a) for all a £ A, then (A, A, a) = VA. 

Proof. Obvious. □ 

Theorem 5.7. The functor \7:Sets — > T-LT\P] preserves and reflects the struc- 
ture of a locally cartesian closed pretopos. In particular, it preserves and reflects 
validity of first- order formulas. 

Proof. One easily checks by hand that V preserves and reflects quotients of 
equivalence relations. Therefore it suffices to prove that the functor \J:Sets 
T-LAsm\P] preserves and reflects the structure of a locally cartesian closed regular 
category with sums, because this structure is preserved and reflected by the 
inclusion T-LAsm\P] — > TIT[P]. But then the result follows immediately from 
the constructions we gave in Section 4 and the previous lemma. □ 
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We have just seen that X?:Sets — > %T[P] preserves and reflects first-order 
logic. But it does not preserve the natural numbers object, because: 

Proposition 5.8. The Herbrand assembly (H,J\f,v) is the natural numbers 
object in the Herbrand topos. 

Proof. Since the successor map s:(N,Af, v) — > (N,7V, v) is monic in the Her- 
brand topos, the nno there will be the smallest subobject of (N, A/", v) containing 
and closed under this map (see, for example, [HI Corollary D5.1.3]). Because 
any subobject of a separated object is automatically separated, this smallest 
subobject is the object (N,7V, v) itself. □ 

Therefore VN is a nonstandard model of arithmetic in the Herbrand topos. 

Remark 5.9. This may be the right point to explain how the category of 
Herbrand assemblies (with V = K\ ) allows one to give a semantic interpretation 
of Herbrand realizability as introduced in Section 5 of pQ. Here it should be 
kept in mind that we fix HEO as our model of Godel's T. 

As explained there, internal quantifiers arc interpreted uniformly: indeed, 
quantification over objects of type is to be interpreted as quantification over 
VN, while quantification over objects of type 1 is to be interpreted as quan- 
tification over V(N N ) = VN VN , et cetera. External quantification should be 
interpreted as quantification over certain subobjects, viz.: 

N s t = (N, TV, An. {(ni, nk) : n = n{ for at least one i}), 
(N N) st = ({/: N ->■ N : / is computable}, 

{codes of total computable functions}, 

Xf.{(ni, . . . , nfc) : at least one ni is a code for /}), 

et cetera. Note that N s t is, in fact, the natural numbers object, but (N — > N) s t 
is not the exponential N^ st ; in fact, the former is a proper subobject of the 
latter (see Lemma \7. 1 1 below) . 

6 Project ives 

In this section we study the projective objects in the Herbrand assemblies and 
the Herbrand topos. 

Definition 6.1. We call a Herbrand assembly (A, A, a) partitioned, if for every 
a 6 A there is an element g a £ V such that 

a(a) =ti„4 (ga)- 

Wc first note that: 
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Lemma 6.2. We have: 

1. The natural numbers object (N,J\f,v) is partitioned. 

2. Every object of the form VZ is isomorphic to a partioned Herbrand as- 
sembly and hence every Herbrand assembly is a subobject of a partitioned 
one. 

3. Partitioned Herbrand assemblies are closed under finite limits. 

4- Every Herbrand assembly can be covered by a partitioned one. 

5. Every retract of a partitioned Herbrand assembly is isomorphic to a par- 
titioned Herbrand assembly. 

Proof. Items 1 and 2 are obvious, so we concentrate on the others. 

It is clear that the terminal object in the category of Herbrand assemblies 
is partitioned and that partitioned Herbrand assemblies are closed under equal- 
izers. Moreover, if (A, A, a) and (B, B, (3) are partitioned Herbrand assemblies, 
then the following partitioned Herbrand assembly is a product in the category 
of Herbrand assemblies: 



A Herbrand assembly {A, A, a) can be covered by the partioned Herbrand 
assembly (A 1 , A', a'), where 

A' = {(a, n) G A x V : a G A, n G a(a)}, 
A' = IA and 
a'(a,n) = flU («■), 
via the projection. The easy details arc left to the reader. 

If (A, A, a) is a retract of the partitioned Herbrand assembly (B,B,(3) via 
maps /: A — !> B and g: B —> A with gf = id, then (A, A, a) is isomorphic to the 
partioned assembly (A,B,f3f). □ 

Proposition 6.3. Partitioned Herbrand assemblies are projective in the cate- 
gory of Herbrand assemblies, both internally and externally. 

Proof. We first show that partitioned Herbrand assemblies are externally pro- 
jective. So suppose p: (B, B, (3) — > (A 7 A, a) is a cover between Herbrand assem- 
blies and (A, A, a) is partitioned. Then there is an element r 6 V such that r 
is defined on all elements of \A and then yields values in IB, and 



-y(a,b) 



C 



c 



Ax B, 
A®B, 

tl(^i»B) (P5affb)- 



(Va G A) (Vn G a(a)) (36 G p^{a))r ■ n G /3(b). 
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In particular, 



(Vo e A) (3feep- 1 (n))r-( 5a ) e/3(6). 



Using choice in the metatheory, this means that there is a function /: A —> B 
such that pf = id and 



Therefore the function / is a section of p tracked by 

s ■ (mi, . . . ,m k ) = r ■ (mi) * . . . *r • (m k ). 

Since the terminal object is partitioned (item 3 of the previous lemma) and 
therefore externally projective, this implies that externally projective objects 



Corollary 6.4. Up to isomorphism, the partitioned Herbrand assemblies are 
the projective objects in the category of Herbrand assemblies. In particular, this 
category is equivalent to the reg/lex- completion of its full subcategory on the 
partitioned Herbrand assemblies. 

Proof. The first statement follows from the previous proposition and items 4 
and 5 of the previous lemma; the second follows from the characterisation of 
rcg/lcx-complctions in [3]. □ 

Corollary 6.5. The natural numbers object is both internally and externally 
projective in the category of Herbrand assemblies. 

In contrast we note that: 

Proposition 6.6. lfV = K\, then the natural numbers object is not externally 
projective in the Herbrand topos. 

Proof. Let Aq and Ai be two recursively inseparable subsets of N and let (N x 
{0, 1}, E) be the object of the Herbrand topos which has no actual or potential 
realizers for nontrival equalities, and whose existence predicate £?=[— = —] is 
given by: 



This map is surjective, because its surjectivity is realized by the element s E V 



(VaeA)r-(g a )Ef3(fa). 



are also internally projective. 



□ 





satisfying 



s ■ (in, ...,n k ) = ((pniO), (pnil), . . . , (pn fc 0), (pn fe l)>. 
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But, on the other hand, this map does not have a section, because a realizer r 
for such a map would allow one to recursively separate the sets Aq and A\ (for 
n£N compute the second projection of (r ■ this always yields either or 

1 and for n G Aj it yields i). □ 

Corollary 6.7. If V — K\, then not every object in the Herbrand topos can 
be covered by a Herbrand assemby. In particular, the Herbrand topos is not the 
ex /reg- completion of the category of Herbrand assemblies. 



7 Logical features of the Herbrand topos 

In this section we determine for some principles whether or not they hold in 
the Herbrand topos, assuming that V = K\. (For more information on these 
principles and explanation of the terminology used here, see |16[ Chapter 4].) 

Lemma 7.1. A function f:N — > N is tracked (as a morphism (N,A/", v) — > 
(N, M , v) in the Herbrand topos ) iff it is bounded by a computable function. 
Indeed, from a tracking one can compute a bound and vice versa. 

Proof. Note that it is necessary and sufficient for a function f:{N,AT,v) — > 
(N,Af, v) to be tracked that one can compute for every n a sequence r(n) = 
(/ii, . . . , rifc) such that f(n) = n% for some i < k. Since one can compute 
maxima, this implies that / is bounded by a computable function g. If, on the 
other hand, g is a computable function bounding /, then r(n) = (0, . . . ,g(n)) 
shows that / is tracked. □ 

Corollary 7.2. In the Herbrand topos the following bounded form of Church's 
Thesis holds: 

{Vx G N) (3y G N) <p(x, y) — » (3e G N) (Vx G N) (e • x I A (3y < e ■ x) ip{x : y)) . 

Proof. Follows from the previous lemma and Corollary 16. 51 □ 
Theorem 7.3. In the Herbrand topos, the weak law of excluded middle 

—iip V —i— tip 

is valid. Hence the De Morgan laws hold, as does: 

(Vz G N) ( P(x) V ->P(x) ) — >■ ( Vx G N) P(x) V -i(Vaj G N) P(x). (1) 

In particular, the law of excluded middle is valid for Yi\-formulas. But Markov's 
principle fails and so does Church's thesis. 
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Proof. It follows from the proof of Lemma 15.31 that {Xp.Q) is an actual realizer 
of -193 or of -i—i(p (depending on whether tp has an actual realizer or not). Hence 
p((Ap.()), (Xp.Q)) is an actual realizer of -itp V -1-199. The De Morgan laws (in 
particular, -1(99 A tp) — ¥ ->ip V ->ij>), the principle in (JJJ and the law of excluded 
middle for LT^-formulas arc immediate consequences of this. 

Nevertheless, not all classical arithmetic is valid in the Herbrand topos: this 
follows from the previous corollary. Therefore Markov's Principle must fail 
(because Markov's Principle together with (JTJ implies full classical arithmetic). 
Alternatively, one can argue directly for the failure of Markov's Principle by 
showing that a realizer for it would allow one to solve the halting problem 
(along the same lines as for modified realizability; see [TJ Proposition 5.9]). 

Church's Thesis in the form CTq is incompatible with the law of excluded 
middle for LT^-formulas (again, use two recursively inseparable r.e. subsets of N, 
or see (TBI Section 4.3]). Also CT fails: in fact, it follows from Lemma [T7TI that 
every bounded function /: N — > N is tracked. □ 

Corollary 7.4. Continuity principles, like every function f: R — > R is contin- 
uous, fail in the Herbrand topos. 

Proof. Because these are incompatible with the law of excluded middle for n"- 
formulas (see, for example, [16j Proposition 4.6.4]). □ 

Corollary 7.5. The Herbrand topos is not equivalent to a realizability topos 
over an ( order- )pca. 

Proof. Because in such toposes Markov's Principle holds. □ 
Corollary 7.6. The Herbrand topos is two-valued, but not boolean. 

Proof. The terminal object has only two subobjects in the category of Herbrand 
assemblies; since the terminal object is separated and separated objects are 
closed under subobjects, the same applies to the Herbrand topos. Hence the 
Herbrand topos is two-valued. Nevertheless, it is not boolean, since Markov's 
Principle fails. □ 

Definition 7.7. (See [16j page 186].) In the following we will mean by a tree 
an inhabited and decidable set of finite sequences of natural numbers, closed 
under predecessors. A tree will be called finitely branching if 

(Vn € T) (3z eN)(VieN)(n*(i)eT->i<4 

Finally, by an infinite path in a tree T we will mean a function a: N — > N such 
that an = (aO, . . . , a(n - 1)) 6 T for all n eN. 
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Lemma 7.8. The collection of infinite paths in a finitely branching tree is a 
uniform object. More precisely, if T is a finitely branching tree, then one can 
compute from a realizer for the statement that T is a finitely branching tree an 
element n S V such that (n) is a common realizer for all infinite paths in the 
tree. 

Proof. From a realizer for the statement that T is finitely branching tree one 
can compute a bound f(n) on the value of a(n) for every infinite path a. This 
is sufficient in view of Lemma 17.11 □ 

Proposition 7.9. In the Herbrand topos Konig's Lemma holds. 

Proof. Recall that Konig's Lemma says that every finitely branching tree which 
is infinite contains an infinite path. Of course, Konig's Lemma is true, but the 
question is whether we can compute a realizer for an infinite path. The previous 
lemma, however, guarantees that we can. □ 

Proposition 7.10. In the Herbrand topos the Fan Theorem holds. 

Proof. Suppose we have realizers for the statements that T is a finitely branching 
tree, that A(x) is a property of its nodes, inherited by successors, and that for 
every infinite path a there is a natural number n € N such that A(an) holds. 
From a realizer for the first statement we compute a common realizer for all 
infinite paths. Then from this and a realizer for the third statement we compute 
a finite sequence (ni, . . . , n^) such that for each infinite path there is an i such 
that A(arii) holds. But as A is inherited by successors, we must have A(an) for 
all infinite paths a, if n = max(ni, . . . , n^). □ 



8 Conclusion and topics for future research 

We have introduced a new topos and established some of its basic properties. 
Still, we have left many interesting questions open. We mention a couple of 
them: 

1. What are the projectives in the Herbrand topos? Are there enough of 
them? Is the Herbrand topos an exact completion? (Compare Q2J pages 
285 and 286].) 

2. How does the Herbrand topos relate to known (realizability) toposes? 
Jaap van Oosten has shown that the Herbrand topos is a subtopos of the 
effective topos over sheaves on Sierpihski space, but probably more can be 
said. 

3. Is there also a topos for the nonstandard functional interpretation devel- 
oped in PQ, in the style of the Dillcr-Nahm topos (see [TS] and [2])? 
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4. We have borrowed some notation from linear logic. Is it possible to estab- 
lish a real connection? (For this purpose [12] may be useful.) 
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